What we store, and why.
Draft for MVP validation, last updated 2026-07-10. Not yet reviewed by legal counsel.
Our approach
Lensiq sets a small number of strictly necessary cookies and browser storage automatically, because certain features — staying signed in, resuming an audit you started before creating an account, and remembering your cookie choice — cannot work without them. These do not require your consent under applicable law. Analytics cookies are different: none are set on your first visit, a banner asks for your consent first, and if you reject or dismiss the banner without choosing, no analytics cookies are set and Google Analytics is never loaded.
Cookies and browser storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
| lensiq-consent | Local storage (necessary) | Remembers whether you accepted or rejected analytics cookies. | Until you clear your browser storage |
| sb-<project-ref>-auth-token (may be split into sb-<project-ref>-auth-token.0, .1, etc.) | Cookie (necessary — authentication) | Keeps you signed in between requests. Set by our authentication provider, Supabase. | Expires automatically, or when you log out |
| lensiq_pending_audit | Cookie (necessary — functional) | Temporarily remembers the website you submitted before you had an account, so we can start your audit once you sign up or log in. | 2 hours, or removed automatically once used |
| _ga | Cookie (analytics — Google Analytics) | Distinguishes unique visitors. | 2 years |
| _ga_<container-id> | Cookie (analytics — Google Analytics) | Persists session state for GA4 reporting. | 2 years |
Third-party cookies
Analytics cookies are set by Google Analytics 4, operated by Google. See Google's Privacy Policy for how Google processes this data.
Changing your choice
You can reset your analytics cookie choice at any time — this clears the stored preference and shows the consent banner again.
Email hello@lensiq.site to request deletion of any analytics data already collected.